NVD

Id
36641  
Name
CVE-2013-0290  
Description
The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-02-19  
Modified Date
2013-09-11  
Seq
2013-0290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187275 36641 CVE-2013-0290 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=77c1090f94d1b0b5186fb13a1b71b47b1343f87f  View
187276 36641 CVE-2013-0290 openSUSE-SU-2013:0951  View
187277 36641 CVE-2013-0290 openSUSE-SU-2013:1042  View
187278 36641 CVE-2013-0290 http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.8.bz2  View
187279 36641 CVE-2013-0290 MDVSA-2013:176  View
187280 36641 CVE-2013-0290 [oss-security] 20130214 Re: CVE Request: kernel -- local DOS (endless loop with interrupts disabled)  View
187281 36641 CVE-2013-0290 https://bugzilla.redhat.com/show_bug.cgi?id=911473  View
187282 36641 CVE-2013-0290 https://github.com/torvalds/linux/commit/77c1090f94d1b0b5186fb13a1b71b47b1343f87f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20031 JVNDB-2013-001606 Linux Kernel の net/core/datagram.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/core/datagram.c の __skb_recv_datagram 関数は、ゼロ長のデータを持つ MSG_PEEK フラグを適切に処理しないため、サービス運用妨害 (無限ループおよびシステムハング) 状態となる脆弱性が存在します。 CVE-2013-0290 60232 CVE-2013-0290 36641 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001606.html 2013-02-19 2013-10-29 View